2025–2026 QualDerm Partners — ~3.1M individuals (HHS; dermatology MSO network intrusion)

QualDerm Partners, LLC, a Tennessee-based management services organization for dermatology practices, disclosed unauthorized network access in late December 2025 (public timelines often cite December 23–24, 2025 activity with discovery December 24, 2025). The U.S. Department of Health and Human Services Office for Civil Rights breach portal listed the incident affecting approximately 3,117,874 individuals (~3.1M), a figure repeatedly echoed in March 2026 legal and trade reporting. Data types described in public reporting included medical records, diagnoses, health insurance information, government-issued IDs, names, dates of birth, email addresses, medical record numbers, treatment information, provider names, and in some cases driver's license numbers. QualDerm offered identity and credit monitoring and engaged forensic specialists and regulators per disclosure summaries.